instar 1.3.501 → 1.3.503

package/dist/core/OwnerSuspectBreaker.d.ts

@@ -46,6 +46,21 @@ export interface OwnerSuspectBreakerOpts {
         suspectForMs: number;
         marks: number;
     }) => void;
+    /**
+     * Breaker-close hook (Durable Inbound Message Queue §3.2 — NEW CODE, named):
+     * fires when `recordSuccess` closes an OPEN episode. The queue drain wires
+     * this to deliver held rows instantly when the owner recovers.
+     */
+    onClose?: (machineId: string) => void;
+    /** Flap-accounting threshold (§4.4): suspect-episodes-per-hour at/above which
+     *  a flap-episode opens. Default 6. */
+    flapThresholdPerHour?: number;
+    /** ONE attention item per flap-episode open (nickname resolution is the
+     *  caller's job — this passes the machine id). */
+    reportFlapEpisode?: (info: {
+        machineId: string;
+        episodesLastHour: number;
+    }) => void;
 }
 export declare class OwnerSuspectBreaker {
     private readonly ttlMs;
@@ -55,6 +70,15 @@ export declare class OwnerSuspectBreaker {
     private suspectUntil;
     /** Per-peer episode accounting (created on first mark, deleted on success). */
     private episodes;
+    /**
+     * Flap accounting (§4.4) — per-peer episode-OPEN timestamps within the last
+     * hour. Deliberately SURVIVES `recordSuccess` (the per-episode latch does
+     * not — that reset was exactly the round-2 hold-budget bug). In-memory:
+     * a restart resets it and it re-trips within an hour — stated in the spec.
+     */
+    private episodeOpens;
+    /** Open flap-episodes (machineId → opened-at). Closes after 30 min calm. */
+    private flapOpenSince;
     constructor(opts?: OwnerSuspectBreakerOpts);
     private log;
     /** Delivery retries to this peer exhausted — open its suspect window.
@@ -75,5 +99,18 @@ export declare class OwnerSuspectBreaker {
     isSuspect(machineId: string): boolean;
     /** A delivery reached the peer — close the episode and re-arm. */
     recordSuccess(machineId: string): void;
+    private recordEpisodeOpen;
+    /**
+     * Is a flap-episode open for this machine (§4.4)? While true, the hold
+     * verdict forces `failover` — a chronically flapping machine gets no hold
+     * at all until it calms (rate below threshold for 30 min re-arms).
+     */
+    isFlapping(machineId: string): boolean;
+    /** Surfaced in /pool/queue (§4.4). */
+    flapState(): Array<{
+        machineId: string;
+        episodesLastHour: number;
+        flapping: boolean;
+    }>;
 }
 //# sourceMappingURL=OwnerSuspectBreaker.d.ts.map

package/dist/core/OwnerSuspectBreaker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"OwnerSuspectBreaker.d.ts","sourceRoot":"","sources":["../../src/core/OwnerSuspectBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+FAA+F;IAC/F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CAC9F;AAKD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,kEAAkE;IAClE,OAAO,CAAC,YAAY,CAA6B;IACjD,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAA0C;gBAE9C,IAAI,GAAE,uBAA4B;IAM9C,OAAO,CAAC,GAAG;IAIX;;;;;;;;;;;;4DAYwD;IACxD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAsBpC,mFAAmF;IACnF,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAKrC,kEAAkE;IAClE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;CASvC"}
+{"version":3,"file":"OwnerSuspectBreaker.d.ts","sourceRoot":"","sources":["../../src/core/OwnerSuspectBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAIH,MAAM,WAAW,uBAAuB;IACtC,oEAAoE;IACpE,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,+FAA+F;IAC/F,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,+EAA+E;IAC/E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IAC7F;;;;OAIG;IACH,OAAO,CAAC,EAAE,CAAC,SAAS,EAAE,MAAM,KAAK,IAAI,CAAC;IACtC;2CACuC;IACvC,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B;sDACkD;IAClD,iBAAiB,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;CACrF;AAKD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAA0B;IAC/C,kEAAkE;IAClE,OAAO,CAAC,YAAY,CAA6B;IACjD,+EAA+E;IAC/E,OAAO,CAAC,QAAQ,CAA0C;IAC1D;;;;;OAKG;IACH,OAAO,CAAC,YAAY,CAA+B;IACnD,4EAA4E;IAC5E,OAAO,CAAC,aAAa,CAA6B;gBAEtC,IAAI,GAAE,uBAA4B;IAM9C,OAAO,CAAC,GAAG;IAIX;;;;;;;;;;;;4DAYwD;IACxD,WAAW,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IAuBpC,mFAAmF;IACnF,SAAS,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAKrC,kEAAkE;IAClE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI;IActC,OAAO,CAAC,iBAAiB;IAczB;;;;OAIG;IACH,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO;IAetC,sCAAsC;IACtC,SAAS,IAAI,KAAK,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,gBAAgB,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,OAAO,CAAA;KAAE,CAAC;CAUvF"}

package/dist/core/OwnerSuspectBreaker.js

@@ -44,6 +44,15 @@ export class OwnerSuspectBreaker {
     suspectUntil = new Map();
     /** Per-peer episode accounting (created on first mark, deleted on success). */
     episodes = new Map();
+    /**
+     * Flap accounting (§4.4) — per-peer episode-OPEN timestamps within the last
+     * hour. Deliberately SURVIVES `recordSuccess` (the per-episode latch does
+     * not — that reset was exactly the round-2 hold-budget bug). In-memory:
+     * a restart resets it and it re-trips within an hour — stated in the spec.
+     */
+    episodeOpens = new Map();
+    /** Open flap-episodes (machineId → opened-at). Closes after 30 min calm. */
+    flapOpenSince = new Map();
     constructor(opts = {}) {
         this.opts = opts;
         this.ttlMs = opts.suspectTtlMs ?? DEFAULT_SUSPECT_TTL_MS;
@@ -80,6 +89,7 @@ export class OwnerSuspectBreaker {
         const f = latch.recordFailure();
         if (f.firstOfEpisode) {
             this.log(`owner ${machineId} SUSPECT (delivery retries exhausted) — short-circuiting its sessions' dispatches for ${Math.round(this.ttlMs / 1000)}s windows until a delivery succeeds`);
+            this.recordEpisodeOpen(machineId);
         }
         if (f.shouldSignal) {
             this.log(`owner ${machineId} suspect for ${Math.round(f.failingForMs / 60_000)}min (${f.failures} marks) — signaling once; half-open re-probes continue`);
@@ -100,7 +110,55 @@ export class OwnerSuspectBreaker {
             if (s.recovered)
                 this.log(`owner ${machineId} recovered after ${s.failures} suspect mark(s)`);
             this.episodes.delete(machineId);
+            // §3.2 event trigger: an OPEN episode just closed — held rows deliver now.
+            this.opts.onClose?.(machineId);
         }
     }
+    // ── Flap accounting (§4.4) ──────────────────────────────────────────
+    recordEpisodeOpen(machineId) {
+        const now = this.now();
+        const hourAgo = now - 3600_000;
+        const opens = (this.episodeOpens.get(machineId) ?? []).filter((t) => t > hourAgo);
+        opens.push(now);
+        this.episodeOpens.set(machineId, opens);
+        const threshold = this.opts.flapThresholdPerHour ?? 6;
+        if (opens.length >= threshold && !this.flapOpenSince.has(machineId)) {
+            this.flapOpenSince.set(machineId, now);
+            this.log(`owner ${machineId} FLAPPING (${opens.length} suspect episodes in the last hour) — holds disabled for it until calm`);
+            this.opts.reportFlapEpisode?.({ machineId, episodesLastHour: opens.length });
+        }
+    }
+    /**
+     * Is a flap-episode open for this machine (§4.4)? While true, the hold
+     * verdict forces `failover` — a chronically flapping machine gets no hold
+     * at all until it calms (rate below threshold for 30 min re-arms).
+     */
+    isFlapping(machineId) {
+        const since = this.flapOpenSince.get(machineId);
+        if (since === undefined)
+            return false;
+        const now = this.now();
+        const opens = (this.episodeOpens.get(machineId) ?? []).filter((t) => t > now - 3600_000);
+        const threshold = this.opts.flapThresholdPerHour ?? 6;
+        const lastOpen = opens.length > 0 ? Math.max(...opens) : 0;
+        // Close when the rate stays below threshold for 30 min.
+        if (opens.length < threshold && now - lastOpen > 30 * 60_000) {
+            this.flapOpenSince.delete(machineId);
+            return false;
+        }
+        return true;
+    }
+    /** Surfaced in /pool/queue (§4.4). */
+    flapState() {
+        const now = this.now();
+        const out = [];
+        for (const [machineId, opens] of this.episodeOpens) {
+            const recent = opens.filter((t) => t > now - 3600_000);
+            if (recent.length === 0 && !this.flapOpenSince.has(machineId))
+                continue;
+            out.push({ machineId, episodesLastHour: recent.length, flapping: this.isFlapping(machineId) });
+        }
+        return out;
+    }
 }
 //# sourceMappingURL=OwnerSuspectBreaker.js.map

package/dist/core/OwnerSuspectBreaker.js.map

@@ -1 +1 @@
-{"version":3,"file":"OwnerSuspectBreaker.js","sourceRoot":"","sources":["../../src/core/OwnerSuspectBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAa/D,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE5C,MAAM,OAAO,mBAAmB;IACb,KAAK,CAAS;IACd,GAAG,CAAe;IAClB,IAAI,CAA0B;IAC/C,kEAAkE;IAC1D,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,+EAA+E;IACvE,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAE1D,YAAY,OAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,CAAC;IAEO,GAAG,CAAC,CAAS;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;4DAYwD;IACxD,WAAW,CAAC,SAAiB;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,mBAAmB,CAAC;gBAC9B,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,uBAAuB;gBACjE,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,yFAAyF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,qCAAqC,CAAC,CAAC;QAC1L,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,wDAAwD,CAAC,CAAC;YAC1J,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,SAAS,CAAC,SAAiB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACnD,CAAC;IAED,kEAAkE;IAClE,aAAa,CAAC,SAAiB;QAC7B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,oBAAoB,CAAC,CAAC,QAAQ,kBAAkB,CAAC,CAAC;YAC9F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;CACF"}
+{"version":3,"file":"OwnerSuspectBreaker.js","sourceRoot":"","sources":["../../src/core/OwnerSuspectBreaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAkCG;AAEH,OAAO,EAAE,mBAAmB,EAAE,MAAM,0BAA0B,CAAC;AAyB/D,MAAM,sBAAsB,GAAG,MAAM,CAAC;AACtC,MAAM,uBAAuB,GAAG,EAAE,GAAG,MAAM,CAAC;AAE5C,MAAM,OAAO,mBAAmB;IACb,KAAK,CAAS;IACd,GAAG,CAAe;IAClB,IAAI,CAA0B;IAC/C,kEAAkE;IAC1D,YAAY,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,+EAA+E;IACvE,QAAQ,GAAG,IAAI,GAAG,EAA+B,CAAC;IAC1D;;;;;OAKG;IACK,YAAY,GAAG,IAAI,GAAG,EAAoB,CAAC;IACnD,4EAA4E;IACpE,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAElD,YAAY,OAAgC,EAAE;QAC5C,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;QACjB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,YAAY,IAAI,sBAAsB,CAAC;QACzD,IAAI,CAAC,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IAClC,CAAC;IAEO,GAAG,CAAC,CAAS;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,mBAAmB,CAAC,EAAE,CAAC,CAAC;IAC7C,CAAC;IAED;;;;;;;;;;;;4DAYwD;IACxD,WAAW,CAAC,SAAiB;QAC3B,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;QAC5D,CAAC;QACD,IAAI,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACzC,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,KAAK,GAAG,IAAI,mBAAmB,CAAC;gBAC9B,aAAa,EAAE,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,uBAAuB;gBACjE,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC,CAAC;YACH,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACtC,CAAC;QACD,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;QAChC,IAAI,CAAC,CAAC,cAAc,EAAE,CAAC;YACrB,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,yFAAyF,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,qCAAqC,CAAC,CAAC;YACxL,IAAI,CAAC,iBAAiB,CAAC,SAAS,CAAC,CAAC;QACpC,CAAC;QACD,IAAI,CAAC,CAAC,YAAY,EAAE,CAAC;YACnB,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,gBAAgB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,YAAY,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,QAAQ,wDAAwD,CAAC,CAAC;YAC1J,IAAI,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,EAAE,SAAS,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC9F,CAAC;IACH,CAAC;IAED,mFAAmF;IACnF,SAAS,CAAC,SAAiB;QACzB,MAAM,KAAK,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/C,OAAO,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;IACnD,CAAC;IAED,kEAAkE;IAClE,aAAa,CAAC,SAAiB;QAC7B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC3C,IAAI,KAAK,EAAE,CAAC;YACV,MAAM,CAAC,GAAG,KAAK,CAAC,aAAa,EAAE,CAAC;YAChC,IAAI,CAAC,CAAC,SAAS;gBAAE,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,oBAAoB,CAAC,CAAC,QAAQ,kBAAkB,CAAC,CAAC;YAC9F,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAChC,2EAA2E;YAC3E,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;IAED,uEAAuE;IAE/D,iBAAiB,CAAC,SAAiB;QACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,OAAO,GAAG,GAAG,GAAG,QAAQ,CAAC;QAC/B,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,OAAO,CAAC,CAAC;QAClF,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAChB,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;QACxC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,CAAC;QACtD,IAAI,KAAK,CAAC,MAAM,IAAI,SAAS,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,CAAC;YACpE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,GAAG,CAAC,SAAS,SAAS,cAAc,KAAK,CAAC,MAAM,wEAAwE,CAAC,CAAC;YAC/H,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/E,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,UAAU,CAAC,SAAiB;QAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACtC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,QAAQ,CAAC,CAAC;QACzF,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,oBAAoB,IAAI,CAAC,CAAC;QACtD,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC3D,wDAAwD;QACxD,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,IAAI,GAAG,GAAG,QAAQ,GAAG,EAAE,GAAG,MAAM,EAAE,CAAC;YAC7D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YACrC,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IAED,sCAAsC;IACtC,SAAS;QACP,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,GAAG,GAA8E,EAAE,CAAC;QAC1F,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,GAAG,GAAG,QAAQ,CAAC,CAAC;YACvD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,SAAS,CAAC;gBAAE,SAAS;YACxE,GAAG,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC;QACjG,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF"}

package/dist/core/OwnershipReconciler.d.ts

@@ -0,0 +1,102 @@
+/**
+ * OwnershipReconciler — WS1.3 of MULTI-MACHINE-SEAMLESSNESS-SPEC: a pin that
+ * disagrees with ownership is a first-class PENDING state with a BOUNDED
+ * convergence path, instead of an indefinite divergence that waits for an
+ * inbound message that may never route (the 2026-06-12 live incident: topic
+ * 13481 sat owner=Mini / pin=Laptop for hours; the closeout reaper attacked the
+ * working session the whole time).
+ *
+ * Each machine runs its own reconciler over LOCAL replicated state (pins are
+ * router-write-only on this machine's disk; ownership reads are the local CAS
+ * registry view) — never a mesh call on the tick path. Convergence is the
+ * cooperative FSM handoff whenever the owner is alive:
+ *
+ *   owner sees conflicting pin → (debounce, safe point, bounded) → CAS
+ *   transfer→(pin target) → target's reconciler sees transferring-to-me → CAS
+ *   claim → active. Claim-before-release; exactly-one-owner by the epoch fence.
+ *
+ * The FORCE path exists only for a PROVABLY DEAD owner: pool capacity offline
+ * with last-seen older than the death-evidence bound AND quorum membership
+ * (Phase C: online > total/2 for N-machine pools; a 2-machine pool degrades to
+ * the surviving machine when its peer is provably dark — documented, since
+ * majority-of-2 cannot lose a member). A reachable-but-slow owner is NEVER
+ * force-claimed — that direction of error (stealing a live conversation
+ * mid-turn) is the round-2 adversarial finding this design closed.
+ *
+ * Provenance: the pin store is written ONLY by the authenticated router
+ * transfer path on this machine — a peer cannot write this machine's pin file,
+ * and journal-replicated placement entries are evidence, never triggers. The
+ * reconciler acts only on its OWN pin store (L15: reach ≠ authority).
+ *
+ * Posture (spec §7): the reconciler is per-machine BY DESIGN (each machine
+ * reconciles its own view; the CAS registry is the shared arbiter). Ships DARK
+ * behind multiMachine.seamlessness.ws13Reconcile with dryRun=true default
+ * (logs intended actions without CAS). Single-machine pools: strict no-op —
+ * the tick returns before touching any machinery when fewer than 2 machines
+ * are registered.
+ */
+import type { SessionOwnershipRegistry, CasResult } from './SessionOwnershipRegistry.js';
+import type { TopicPlacementPinStore } from './TopicPlacementPinStore.js';
+export interface ReconcilerMachineView {
+    machineId: string;
+    online: boolean;
+    /** ms since epoch of the machine's last self-reported heartbeat (0 = never). */
+    lastSeenMs: number;
+}
+export interface OwnershipReconcilerDeps {
+    /** Dark flag — read live each tick. */
+    enabled: () => boolean;
+    /** Dry-run — log intended actions, never CAS. Read live. */
+    dryRun: () => boolean;
+    selfMachineId: string;
+    pinStore: TopicPlacementPinStore;
+    ownership: SessionOwnershipRegistry;
+    /** All REGISTERED machines (online and not). [] or [self] → strict no-op. */
+    machines: () => ReconcilerMachineView[];
+    /**
+     * Safe-point check: is the topic's local session mid-turn right now?
+     * Busy → defer the cooperative release until idle OR until safePointDeadlineMs
+     * has elapsed since the conflict was first observed (the spec's bounded
+     * "next safe point": end of turn or T seconds, whichever first).
+     */
+    isTopicBusy: (sessionKey: string) => boolean;
+    /** Journal pairing (§3.3): every landed CAS emits a placement entry. */
+    emitPlacement: (sessionKey: string, r: CasResult & {
+        ok: true;
+    }, reason: 'reconcile-transfer' | 'reconcile-claim' | 'reconcile-force-claim' | 'reconcile-adopt') => void;
+    /** Pin must be stable this long before the owner acts (flap debounce). */
+    debounceMs?: number;
+    /** Bounded safe-point wait: after this, transfer even if the session is busy. */
+    safePointDeadlineMs?: number;
+    /** Owner-death evidence: offline AND lastSeen older than this. */
+    deathEvidenceMs?: number;
+    now?: () => number;
+    logger?: (msg: string) => void;
+}
+export interface ReconcileTickReport {
+    examined: number;
+    transfers: number;
+    claims: number;
+    forceClaims: number;
+    adoptions: number;
+    deferredBusy: number;
+    deferredDebounce: number;
+    deferredNoEvidence: number;
+    dryRun: boolean;
+    skipped?: 'disabled' | 'single-machine';
+}
+export declare class OwnershipReconciler {
+    private readonly d;
+    /** First time we observed each topic's CURRENT conflict (cleared on convergence). */
+    private readonly conflictSince;
+    constructor(deps: OwnershipReconcilerDeps);
+    private now;
+    private log;
+    /**
+     * One reconcile pass. Deterministic over local state; bounded by the number
+     * of pinned topics. Safe to call on any cadence.
+     */
+    tick(): ReconcileTickReport;
+    private act;
+}
+//# sourceMappingURL=OwnershipReconciler.d.ts.map

package/dist/core/OwnershipReconciler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnershipReconciler.d.ts","sourceRoot":"","sources":["../../src/core/OwnershipReconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,wBAAwB,EAAE,SAAS,EAAE,MAAM,+BAA+B,CAAC;AAEzF,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,6BAA6B,CAAC;AAE1E,MAAM,WAAW,qBAAqB;IACpC,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,OAAO,CAAC;IAChB,gFAAgF;IAChF,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,uBAAuB;IACtC,uCAAuC;IACvC,OAAO,EAAE,MAAM,OAAO,CAAC;IACvB,4DAA4D;IAC5D,MAAM,EAAE,MAAM,OAAO,CAAC;IACtB,aAAa,EAAE,MAAM,CAAC;IACtB,QAAQ,EAAE,sBAAsB,CAAC;IACjC,SAAS,EAAE,wBAAwB,CAAC;IACpC,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,qBAAqB,EAAE,CAAC;IACxC;;;;;OAKG;IACH,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IAC7C,wEAAwE;IACxE,aAAa,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,GAAG;QAAE,EAAE,EAAE,IAAI,CAAA;KAAE,EAAE,MAAM,EAAE,oBAAoB,GAAG,iBAAiB,GAAG,uBAAuB,GAAG,iBAAiB,KAAK,IAAI,CAAC;IACzK,0EAA0E;IAC1E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,iFAAiF;IACjF,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,kEAAkE;IAClE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,EAAE,MAAM,CAAC;IACrB,gBAAgB,EAAE,MAAM,CAAC;IACzB,kBAAkB,EAAE,MAAM,CAAC;IAC3B,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,CAAC,EAAE,UAAU,GAAG,gBAAgB,CAAC;CACzC;AAMD,qBAAa,mBAAmB;IAC9B,OAAO,CAAC,QAAQ,CAAC,CAAC,CAA0B;IAC5C,qFAAqF;IACrF,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA6B;gBAE/C,IAAI,EAAE,uBAAuB;IAIzC,OAAO,CAAC,GAAG;IAGX,OAAO,CAAC,GAAG;IAIX;;;OAGG;IACH,IAAI,IAAI,mBAAmB;IAiG3B,OAAO,CAAC,GAAG;CA4BZ"}

package/dist/core/OwnershipReconciler.js

@@ -0,0 +1,185 @@
+/**
+ * OwnershipReconciler — WS1.3 of MULTI-MACHINE-SEAMLESSNESS-SPEC: a pin that
+ * disagrees with ownership is a first-class PENDING state with a BOUNDED
+ * convergence path, instead of an indefinite divergence that waits for an
+ * inbound message that may never route (the 2026-06-12 live incident: topic
+ * 13481 sat owner=Mini / pin=Laptop for hours; the closeout reaper attacked the
+ * working session the whole time).
+ *
+ * Each machine runs its own reconciler over LOCAL replicated state (pins are
+ * router-write-only on this machine's disk; ownership reads are the local CAS
+ * registry view) — never a mesh call on the tick path. Convergence is the
+ * cooperative FSM handoff whenever the owner is alive:
+ *
+ *   owner sees conflicting pin → (debounce, safe point, bounded) → CAS
+ *   transfer→(pin target) → target's reconciler sees transferring-to-me → CAS
+ *   claim → active. Claim-before-release; exactly-one-owner by the epoch fence.
+ *
+ * The FORCE path exists only for a PROVABLY DEAD owner: pool capacity offline
+ * with last-seen older than the death-evidence bound AND quorum membership
+ * (Phase C: online > total/2 for N-machine pools; a 2-machine pool degrades to
+ * the surviving machine when its peer is provably dark — documented, since
+ * majority-of-2 cannot lose a member). A reachable-but-slow owner is NEVER
+ * force-claimed — that direction of error (stealing a live conversation
+ * mid-turn) is the round-2 adversarial finding this design closed.
+ *
+ * Provenance: the pin store is written ONLY by the authenticated router
+ * transfer path on this machine — a peer cannot write this machine's pin file,
+ * and journal-replicated placement entries are evidence, never triggers. The
+ * reconciler acts only on its OWN pin store (L15: reach ≠ authority).
+ *
+ * Posture (spec §7): the reconciler is per-machine BY DESIGN (each machine
+ * reconciles its own view; the CAS registry is the shared arbiter). Ships DARK
+ * behind multiMachine.seamlessness.ws13Reconcile with dryRun=true default
+ * (logs intended actions without CAS). Single-machine pools: strict no-op —
+ * the tick returns before touching any machinery when fewer than 2 machines
+ * are registered.
+ */
+const DEFAULT_DEBOUNCE_MS = 30_000;
+const DEFAULT_SAFE_POINT_DEADLINE_MS = 120_000;
+const DEFAULT_DEATH_EVIDENCE_MS = 180_000;
+export class OwnershipReconciler {
+    d;
+    /** First time we observed each topic's CURRENT conflict (cleared on convergence). */
+    conflictSince = new Map();
+    constructor(deps) {
+        this.d = deps;
+    }
+    now() {
+        return (this.d.now ?? Date.now)();
+    }
+    log(msg) {
+        try {
+            this.d.logger?.(`[OwnershipReconciler] ${msg}`);
+        }
+        catch { /* observability never gates */ }
+    }
+    /**
+     * One reconcile pass. Deterministic over local state; bounded by the number
+     * of pinned topics. Safe to call on any cadence.
+     */
+    tick() {
+        const report = {
+            examined: 0, transfers: 0, claims: 0, forceClaims: 0, adoptions: 0,
+            deferredBusy: 0, deferredDebounce: 0, deferredNoEvidence: 0,
+            dryRun: this.d.dryRun(),
+        };
+        if (!this.d.enabled()) {
+            report.skipped = 'disabled';
+            return report;
+        }
+        const machines = this.d.machines();
+        if (machines.length < 2) {
+            // Spec invariant 6: single-machine strict no-op — no machinery entered.
+            report.skipped = 'single-machine';
+            return report;
+        }
+        const now = this.now();
+        const self = this.d.selfMachineId;
+        const byId = new Map(machines.map((m) => [m.machineId, m]));
+        for (const [sessionKey, pin] of Object.entries(this.d.pinStore.all())) {
+            if (!pin.pinned || !pin.preferredMachine)
+                continue;
+            const rec = this.d.ownership.read(sessionKey);
+            const owner = rec && rec.status !== 'released' ? rec.ownerMachineId : null;
+            if (owner === pin.preferredMachine && rec?.status === 'active') {
+                this.conflictSince.delete(sessionKey);
+                continue; // converged
+            }
+            report.examined++;
+            if (!this.conflictSince.has(sessionKey))
+                this.conflictSince.set(sessionKey, now);
+            const since = this.conflictSince.get(sessionKey);
+            // ── Case B: a transfer is mid-flight TO ME → claim (completes the handoff).
+            if (rec?.status === 'transferring' && rec.transferTo === self) {
+                this.act(report, 'claims', sessionKey, { type: 'claim', machineId: self }, 'reconcile-claim');
+                continue;
+            }
+            if (rec?.status === 'transferring')
+                continue; // someone else's claim to make
+            // ── Case D: no live record and the pin names ME → adopt (place→claim).
+            if ((!rec || rec.status === 'released') && pin.preferredMachine === self) {
+                const placed = this.act(report, 'adoptions', sessionKey, { type: 'place', machineId: self }, 'reconcile-adopt');
+                if (placed)
+                    this.act(report, 'adoptions', sessionKey, { type: 'claim', machineId: self }, 'reconcile-adopt', /*countOnce*/ true);
+                continue;
+            }
+            if (!rec || rec.status === 'released')
+                continue;
+            // From here the record is active with owner ≠ pin target.
+            // ── Case A: I am the live owner → cooperative transfer at a safe point.
+            if (owner === self) {
+                // Flap debounce: the pin must be stable before the owner gives up custody.
+                const pinAgeMs = now - Date.parse(pin.updatedAt);
+                if (Number.isFinite(pinAgeMs) && pinAgeMs < (this.d.debounceMs ?? DEFAULT_DEBOUNCE_MS)) {
+                    report.deferredDebounce++;
+                    continue;
+                }
+                // Bounded safe point: wait for idle, but never past the deadline.
+                const busy = this.d.isTopicBusy(sessionKey);
+                const pastDeadline = now - since >= (this.d.safePointDeadlineMs ?? DEFAULT_SAFE_POINT_DEADLINE_MS);
+                if (busy && !pastDeadline) {
+                    report.deferredBusy++;
+                    continue;
+                }
+                this.act(report, 'transfers', sessionKey, { type: 'transfer', to: pin.preferredMachine }, 'reconcile-transfer');
+                continue;
+            }
+            // ── Case C: the pin names ME but a DEAD machine holds the record → force.
+            if (pin.preferredMachine === self) {
+                const ownerView = owner ? byId.get(owner) : undefined;
+                const ownerProvablyDead = !!ownerView
+                    && !ownerView.online
+                    && (now - ownerView.lastSeenMs) >= (this.d.deathEvidenceMs ?? DEFAULT_DEATH_EVIDENCE_MS);
+                // Owner not even REGISTERED → it cannot heartbeat or hold a lease here;
+                // treat as dead only with the same age discipline (no view = no liveness
+                // proof; lastSeenMs 0 satisfies the age bound trivially, which is right:
+                // a machine the pool has never seen cannot be the live owner).
+                const ownerUnknown = !!owner && !ownerView;
+                // Quorum (Phase C — N machines): act only from the majority partition.
+                // total ≤ 2 degrades to "the surviving machine proceeds against a
+                // provably dark peer" (majority-of-2 cannot lose a member; documented).
+                const online = machines.filter((m) => m.online).length;
+                const inQuorum = machines.length <= 2 || online * 2 > machines.length;
+                if ((ownerProvablyDead || ownerUnknown) && inQuorum) {
+                    this.act(report, 'forceClaims', sessionKey, { type: 'force-claim', machineId: self }, 'reconcile-force-claim');
+                }
+                else {
+                    // Alive (or merely slow / unproven) owner: its own reconciler runs
+                    // Case A. We surface the pending state and wait — never steal.
+                    report.deferredNoEvidence++;
+                }
+                continue;
+            }
+            // Neither owner nor pin target: not my move this tick.
+        }
+        return report;
+    }
+    act(report, counter, sessionKey, action, reason, countOnce = false) {
+        if (this.d.dryRun()) {
+            this.log(`DRY-RUN would ${action.type} ${sessionKey} (${reason})`);
+            if (!countOnce)
+                report[counter]++;
+            return false; // dry-run never lands a CAS, so chained steps stop here
+        }
+        const r = this.d.ownership.cas(action, {
+            sessionKey,
+            sender: this.d.selfMachineId,
+            nonce: `${this.d.selfMachineId}:${reason}:${sessionKey}:${this.now()}`,
+        });
+        if (r.ok) {
+            if (!countOnce)
+                report[counter]++;
+            this.log(`${action.type} landed for ${sessionKey} (${reason}, epoch ${r.record.ownershipEpoch})`);
+            try {
+                this.d.emitPlacement(sessionKey, r, reason);
+            }
+            catch { /* §3.3 pairing is observability — never endangers the CAS */ }
+            this.conflictSince.delete(sessionKey);
+            return true;
+        }
+        this.log(`${action.type} rejected for ${sessionKey} (${'reason' in r ? r.reason : 'unknown'}) — will re-evaluate next tick`);
+        return false;
+    }
+}
+//# sourceMappingURL=OwnershipReconciler.js.map

package/dist/core/OwnershipReconciler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"OwnershipReconciler.js","sourceRoot":"","sources":["../../src/core/OwnershipReconciler.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAuDH,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,8BAA8B,GAAG,OAAO,CAAC;AAC/C,MAAM,yBAAyB,GAAG,OAAO,CAAC;AAE1C,MAAM,OAAO,mBAAmB;IACb,CAAC,CAA0B;IAC5C,qFAAqF;IACpE,aAAa,GAAG,IAAI,GAAG,EAAkB,CAAC;IAE3D,YAAY,IAA6B;QACvC,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC;IAChB,CAAC;IAEO,GAAG;QACT,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACpC,CAAC;IACO,GAAG,CAAC,GAAW;QACrB,IAAI,CAAC;YAAC,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,yBAAyB,GAAG,EAAE,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC,CAAC,+BAA+B,CAAC,CAAC;IACpG,CAAC;IAED;;;OAGG;IACH,IAAI;QACF,MAAM,MAAM,GAAwB;YAClC,QAAQ,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,WAAW,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC;YAClE,YAAY,EAAE,CAAC,EAAE,gBAAgB,EAAE,CAAC,EAAE,kBAAkB,EAAE,CAAC;YAC3D,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE;SACxB,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACtB,MAAM,CAAC,OAAO,GAAG,UAAU,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxB,wEAAwE;YACxE,MAAM,CAAC,OAAO,GAAG,gBAAgB,CAAC;YAClC,OAAO,MAAM,CAAC;QAChB,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACvB,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;QAClC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAE5D,KAAK,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC;YACtE,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,gBAAgB;gBAAE,SAAS;YACnD,MAAM,GAAG,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAC9C,MAAM,KAAK,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAAC;YAC3E,IAAI,KAAK,KAAK,GAAG,CAAC,gBAAgB,IAAI,GAAG,EAAE,MAAM,KAAK,QAAQ,EAAE,CAAC;gBAC/D,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;gBACtC,SAAS,CAAC,YAAY;YACxB,CAAC;YACD,MAAM,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAC;gBAAE,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;YACjF,MAAM,KAAK,GAAG,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,UAAU,CAAE,CAAC;YAElD,6EAA6E;YAC7E,IAAI,GAAG,EAAE,MAAM,KAAK,cAAc,IAAI,GAAG,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;gBAC9D,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAC9F,SAAS;YACX,CAAC;YACD,IAAI,GAAG,EAAE,MAAM,KAAK,cAAc;gBAAE,SAAS,CAAC,+BAA+B;YAE7E,wEAAwE;YACxE,IAAI,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU,CAAC,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBACzE,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,iBAAiB,CAAC,CAAC;gBAChH,IAAI,MAAM;oBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,iBAAiB,EAAE,aAAa,CAAC,IAAI,CAAC,CAAC;gBACjI,SAAS;YACX,CAAC;YACD,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,UAAU;gBAAE,SAAS;YAEhD,0DAA0D;YAC1D,yEAAyE;YACzE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;gBACnB,2EAA2E;gBAC3E,MAAM,QAAQ,GAAG,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;gBACjD,IAAI,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,UAAU,IAAI,mBAAmB,CAAC,EAAE,CAAC;oBACvF,MAAM,CAAC,gBAAgB,EAAE,CAAC;oBAC1B,SAAS;gBACX,CAAC;gBACD,kEAAkE;gBAClE,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,WAAW,CAAC,UAAU,CAAC,CAAC;gBAC5C,MAAM,YAAY,GAAG,GAAG,GAAG,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,mBAAmB,IAAI,8BAA8B,CAAC,CAAC;gBACnG,IAAI,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;oBAC1B,MAAM,CAAC,YAAY,EAAE,CAAC;oBACtB,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,GAAG,CAAC,gBAAgB,EAAE,EAAE,oBAAoB,CAAC,CAAC;gBAChH,SAAS;YACX,CAAC;YAED,2EAA2E;YAC3E,IAAI,GAAG,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAClC,MAAM,SAAS,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACtD,MAAM,iBAAiB,GAAG,CAAC,CAAC,SAAS;uBAChC,CAAC,SAAS,CAAC,MAAM;uBACjB,CAAC,GAAG,GAAG,SAAS,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,IAAI,yBAAyB,CAAC,CAAC;gBAC3F,wEAAwE;gBACxE,yEAAyE;gBACzE,yEAAyE;gBACzE,+DAA+D;gBAC/D,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC;gBAC3C,uEAAuE;gBACvE,kEAAkE;gBAClE,wEAAwE;gBACxE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC;gBACvD,MAAM,QAAQ,GAAG,QAAQ,CAAC,MAAM,IAAI,CAAC,IAAI,MAAM,GAAG,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC;gBACtE,IAAI,CAAC,iBAAiB,IAAI,YAAY,CAAC,IAAI,QAAQ,EAAE,CAAC;oBACpD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,aAAa,EAAE,UAAU,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,uBAAuB,CAAC,CAAC;gBACjH,CAAC;qBAAM,CAAC;oBACN,mEAAmE;oBACnE,+DAA+D;oBAC/D,MAAM,CAAC,kBAAkB,EAAE,CAAC;gBAC9B,CAAC;gBACD,SAAS;YACX,CAAC;YACD,uDAAuD;QACzD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,GAAG,CACT,MAA2B,EAC3B,OAA6D,EAC7D,UAAkB,EAClB,MAAsD,EACtD,MAA8F,EAC9F,SAAS,GAAG,KAAK;QAEjB,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;YACpB,IAAI,CAAC,GAAG,CAAC,iBAAiB,MAAM,CAAC,IAAI,IAAI,UAAU,KAAK,MAAM,GAAG,CAAC,CAAC;YACnE,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC,CAAC,wDAAwD;QACxE,CAAC;QACD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,EAAE;YACrC,UAAU;YACV,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC,aAAa;YAC5B,KAAK,EAAE,GAAG,IAAI,CAAC,CAAC,CAAC,aAAa,IAAI,MAAM,IAAI,UAAU,IAAI,IAAI,CAAC,GAAG,EAAE,EAAE;SACvE,CAAC,CAAC;QACH,IAAI,CAAC,CAAC,EAAE,EAAE,CAAC;YACT,IAAI,CAAC,SAAS;gBAAE,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;YAClC,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,eAAe,UAAU,KAAK,MAAM,WAAW,CAAC,CAAC,MAAM,CAAC,cAAc,GAAG,CAAC,CAAC;YAClG,IAAI,CAAC;gBAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC,UAAU,EAAE,CAAC,EAAE,MAAM,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,6DAA6D,CAAC,CAAC;YAC5H,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACtC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,IAAI,iBAAiB,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,gCAAgC,CAAC,CAAC;QAC7H,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}